3533b142cd5b092a59d02aa677c344106be5f549e83a1be077822e5a8dcd4349

General

Target
3533b142cd5b092a59d02aa677c344106be5f549e83a1be077822e5a8dcd4349
Size 119KB
Sample220220-khjtssbfdr
SHA256 3533b142cd5b092a59d02aa677c344106be5f549e83a1be077822e5a8dcd4349
MD5 02da6d6d95eaf94583b666c2ed490d70
SHA1 38b7074c06f3badbd7e86b7d32c1ddbccff43cb3
SHA512 5ca227bf56e27f8c59f34340681b925a2976f337f646a8f1ba5138698b6f21e81001e27ab313c3fa75bfcf0c43d72f1825bb3ef237dc96e2a893b824e8ccfd4c
SSDEEP 1536:Au0mfMqRKzZMxsaORtIZcGDHaRxBDR0+RZ68rlEz9sIWjmtQJcBmsWuxUccd7Qw:N0Y2ZweGexBR0sZ6wzmtka29cwMKJ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

3533b142cd5b092a59d02aa677c344106be5f549e83a1be077822e5a8dcd4349

.exe 119KB

3533b142cd5b092a59d02aa677c344106be5f549e83a1be077822e5a8dcd4349

IMPHASH f2e6d7afae8879ced85f9f2701d132e1
SHA256 3533b142cd5b092a59d02aa677c344106be5f549e83a1be077822e5a8dcd4349
MD5 02da6d6d95eaf94583b666c2ed490d70
SHA1 38b7074c06f3badbd7e86b7d32c1ddbccff43cb3
SHA512 5ca227bf56e27f8c59f34340681b925a2976f337f646a8f1ba5138698b6f21e81001e27ab313c3fa75bfcf0c43d72f1825bb3ef237dc96e2a893b824e8ccfd4c
SSDEEP 1536:Au0mfMqRKzZMxsaORtIZcGDHaRxBDR0+RZ68rlEz9sIWjmtQJcBmsWuxUccd7Qw:N0Y2ZweGexBR0sZ6wzmtka29cwMKJ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20369

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcessHeap OpenProcess GetCurrentProcess CreateRemoteThread GetCurrentThread GetLastError SetLastError WriteProcessMemory Sleep CloseHandle CreateMutexA HeapFree LoadLibraryW GetModuleFileNameW GetModuleHandleA GetCommandLineW GetWindowsDirectoryW CreateFileW DeleteFileW GetVersionExW CreateToolhelp32Snapshot Process32FirstW Process32NextW HeapAlloc VirtualFreeEx VirtualAllocEx LocalFree GlobalFree GlobalAlloc GetProcAddress LoadLibraryA DecodePointer WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW TerminateProcess RaiseException InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection ExitProcess GetModuleHandleExW GetStdHandle WriteFile MultiByteToWideChar WideCharToMultiByte GetACP LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize HeapReAlloc SetFilePointerEx FreeLibrary

advapi32

SystemFunction036 LookupPrivilegeValueW LookupAccountSidW AdjustTokenPrivileges GetTokenInformation OpenThreadToken OpenProcessToken ImpersonateSelf

shell32

ShellExecuteW CommandLineToArgvW

Sharing

General

Malware Config

Signatures

File Explorer

3533b142cd5b092a59d02aa677c344106be5f549e83a1be077822e5a8dcd4349

kernel32

advapi32

shell32